Route Origin Authorization

$ rpki-client -vvf rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030303a3a2f33362d3336203d3e20323135393738.roa
File:                     326131333a646638373a323030303a3a2f33362d3336203d3e20323135393738.roa (raw, json)
Hash identifier:          gJPV6L3YE4LvXa0bzPNYNUH70i1Fv924YDwDaN/4Xqs=
Subject key identifier:   36:4E:F2:7B:A5:0C:1B:2E:77:B2:1C:15:BC:B8:3D:EB:21:4E:60:49
Certificate issuer:       /CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Certificate serial:       7F07E8CD805D15E36E4262D24AE1D5442D3F5C61
Authority key identifier: 7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
Authority info access:    rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Subject info access:      rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030303a3a2f33362d3336203d3e20323135393738.roa
Signing time:             Mon 08 Jan 2024 20:58:27 +0000
ROA not before:           Mon 08 Jan 2024 20:53:27 +0000
ROA not after:            Mon 06 Jan 2025 20:58:27 +0000
asID:                     215978
IP address blocks:        2a13:df87:2000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Sat 13 Jan 2024 20:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:07:e8:cd:80:5d:15:e3:6e:42:62:d2:4a:e1:d5:44:2d:3f:5c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
        Validity
            Not Before: Jan  8 20:53:27 2024 GMT
            Not After : Jan  6 20:58:27 2025 GMT
        Subject: CN=364EF27BA50C1B2E77B21C15BCB83DEB214E6049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:89:45:d7:b0:b0:f6:eb:39:60:ce:46:7e:
                    d3:a0:a9:c4:e7:d0:23:0c:b1:7f:30:0d:d0:83:9f:
                    6d:16:16:dc:1e:f7:18:00:2f:7c:8b:a9:76:00:3f:
                    9d:b5:13:9e:ed:94:72:0b:f7:a6:e5:0a:c5:de:64:
                    fe:cb:d4:77:65:6e:f3:ce:02:21:96:71:41:6e:84:
                    b4:c4:4b:e9:ff:c9:c8:d2:48:da:89:3a:3e:09:6c:
                    e0:ce:af:39:f9:bd:9d:c4:6a:d4:8c:ee:3d:c7:99:
                    c2:16:3b:60:e9:84:03:13:76:ed:83:4f:17:b3:7c:
                    22:49:c9:bf:e1:35:96:da:d7:aa:65:48:90:13:39:
                    83:2f:ba:48:fb:ab:07:3f:76:f3:87:d1:34:51:52:
                    a6:84:5f:a1:48:f5:31:fc:d1:61:27:09:2b:24:81:
                    d6:f9:3e:a2:64:0b:03:0c:c0:84:a4:96:22:e9:39:
                    60:ec:5a:1d:1a:cc:bb:ad:a6:ef:5c:d8:91:a5:c9:
                    68:44:a1:da:0e:f3:5f:7e:7c:b4:52:66:20:54:9e:
                    42:aa:f3:2e:fa:31:59:75:fb:f4:27:6e:00:c3:86:
                    49:e5:3c:5d:96:6a:e9:d0:0f:23:dd:6d:0a:e1:54:
                    3c:34:85:7f:99:6d:3d:7a:5b:2d:79:45:f6:34:30:
                    be:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4E:F2:7B:A5:0C:1B:2E:77:B2:1C:15:BC:B8:3D:EB:21:4E:60:49
            X509v3 Authority Key Identifier:
                keyid:7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Netiface/0/326131333a646638373a323030303a3a2f33362d3336203d3e20323135393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         55:5c:bb:7c:46:75:99:3e:f9:4c:30:23:d0:20:a2:d7:2e:15:
         ab:10:e9:73:ef:95:4c:08:7a:e6:f2:0a:e5:54:1f:29:46:e6:
         b1:3e:c8:39:56:9b:42:26:00:e6:a6:5b:5c:d9:a2:52:ff:d4:
         5d:6a:2c:b9:ef:c3:a4:e1:53:40:65:61:47:02:7c:c7:ad:f4:
         cf:62:d9:f2:e2:7e:ab:9f:a8:39:fc:76:58:db:2a:f0:cc:68:
         84:9f:1f:96:2e:27:98:b6:f8:c4:25:8c:d4:0c:a5:9b:1c:38:
         ec:c8:b5:c9:8c:81:58:26:ca:d5:c3:6a:13:00:a2:fc:3b:37:
         3a:33:53:d7:03:05:a7:7a:88:6e:24:f3:af:2b:fd:bf:f0:7c:
         ba:4e:88:77:34:c0:bc:a4:34:6c:98:50:99:e0:4a:a2:d3:5f:
         59:65:51:cc:87:ec:b7:b2:44:f5:bf:be:06:0e:0d:7c:7d:1b:
         7c:43:82:45:98:92:ae:e5:c3:73:f0:3d:ee:62:67:d9:15:e6:
         59:86:e2:4e:6a:58:35:ed:8c:e0:45:26:42:ca:fe:cc:9a:7b:
         94:9a:d1:1b:a0:6b:14:47:ab:9e:0b:04:f5:cd:54:55:b0:1a:
         61:33:74:64:3e:21:c6:f1:37:56:28:1f:54:07:23:b8:d7:50:
         d9:e2:ca:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 13 23:33:12 2024 by rpki-client on console-ams.rpki-client.org